Security Compliance Manager - PCI DSS specialist

Are you the kind of person who spots a misplaced data packet the way others spot typos? Do you get a tiny spark of joy from a perfectly documented process or a beautifully segmented network diagram? If so… we should definitely talk.

As our Security Compliance Manager, you’ll be the guardian of our most prized digital treasure, our information assets and payment environments. Think of yourself as the protector of our Cardholder Data Kingdom: part detective, part strategist, part compliance wizard!

Your mission? To make sure our organisation not only meets PCI DSS v4.01 standards but absolutely nails them, with robust controls, airtight evidence, and a compliance rhythm smoother than a freshly patched server.

You’ll be the go-to expert on all things PCI, orchestrating assessments, guiding teams, taming audit chaos, charming QSAs, decoding vulnerabilities, and making sure our controls not only exist but actually work. And because your superpowers extend beyond PCI, you’ll also help steer ISO27001, support our security accreditations, and champion continuous improvement across our security ecosystem.

If you love diving into detail, shaping best practice, keeping systems honest, and sleeping soundly knowing you’ve prevented chaos before it even thought about happening, this is your kind of playground!

Who we are

The UK’s fastest broadband network. The nation’s best-loved mobile brand. And, one of the UK's biggest companies too. We put our customers first, making life simpler, smoother, and more joyful. With big ambitions and a brilliant team, we’re building a more connected future for everyone.

Our ways of working

We’re a flexible-first organisation, because we know people do their best work when they have choice and clarity. To support meaningful collaboration, we ask everyone to spend at least eight days each month connecting in person.

That doesn’t just mean time in the office, it could be team meetings, offsites, volunteering days, multi-functional projects, or away days - anywhere meaningful collaboration happens. What matters is making those moments purposeful, so when we come together, it really counts.